package com.xzj.common.okhttp.config;

import com.xzj.common.okhttp.properties.OkHttpProps;
import jakarta.annotation.Resource;
import lombok.extern.slf4j.Slf4j;
import okhttp3.ConnectionPool;
import okhttp3.OkHttpClient;
import org.springframework.boot.context.properties.EnableConfigurationProperties;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;
import java.util.concurrent.TimeUnit;

/**
 * @Category com.ctdi.cnos.cims.collect.physical.common.http.config
 * @Description 【功能描述】
 * @Author xiaj07
 * @Since 2023/4/14 15:55
 **/
@Configuration
@EnableConfigurationProperties(OkHttpProps.class)
@Slf4j
public class OkHttpConfig {

    @Resource
    private OkHttpProps okHttpProps;

    @Bean
    public X509TrustManager x509TrustManager() {
        return new X509TrustManager() {
            @Override
            public void checkClientTrusted(X509Certificate[] x509Certificates, String s) {
            }

            @Override
            public void checkServerTrusted(X509Certificate[] x509Certificates, String s) {
            }

            @Override
            public X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }
        };
    }

    @Bean
    public SSLSocketFactory sslSocketFactory() {
        try {
            //信任任何链接
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, new TrustManager[] {x509TrustManager()}, new SecureRandom());
            return sslContext.getSocketFactory();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        }
        return null;
    }

    /**
     * Create a new connection pool with tuning parameters appropriate for a single-user application. The tuning
     * parameters in this pool are subject to change in future OkHttp releases. Currently
     */
    @Bean
    public ConnectionPool pool() {
        return new ConnectionPool(okHttpProps.getMaxIdleConnections(), okHttpProps.getKeepAliveDuration(),
            okHttpProps.getKeepAliveUnit());
    }

    @Bean
    public OkHttpClient okHttpClient() {
        return new OkHttpClient.Builder().sslSocketFactory(sslSocketFactory(), x509TrustManager())
            .retryOnConnectionFailure(false)//是否开启缓存
            .connectionPool(pool())//连接池
            .connectTimeout(okHttpProps.getTimeOut(), TimeUnit.SECONDS)
            .readTimeout(okHttpProps.getTimeOut(), TimeUnit.SECONDS).build();
    }
}
